GO-2025-3367 vulnerabilities

Vulnerabilities for packages: kaniko, flux-source-controller, zarf, pulumi-language-yaml, gitea-fips, flux-image-automation-controller, flux-source-controller-fips, goreleaser, kubevela, skaffold, gitea, gitsign, nemo, grafana-alloy, tfsec, gptscript, kyverno, trivy, argo-workflows, argo-cd,...